Hacker News new | ask | show | jobs
by subway 3133 days ago
https://github.com/folkswithhats/fedy/blob/master/plugins/an...

I made it 10 lines into the very first plugin before hitting a point where the installer script is downloading a file over an insecure connection, and treating it as a list of trusted URLs.

1 comments

And look where those nefarious links are pointing!! developer.android.com and dl.google.com...

As I said, if you feel safer because you run all those commands manually, it is ok...

You stripped the most important part from links, the thing that the comment you replied to was pointing out.